tree 4f5958063eb57849e4687e4c5366b1212a1d9d6a
parent d726d8d719b6ac919cc4d5cae73831a2ffe36118
author Mimi Zohar <zohar@linux.vnet.ibm.com> 1361457082 -0500
committer Mimi Zohar <zohar@linux.vnet.ibm.com> 1371728870 -0400

evm: audit integrity metadata failures

Before modifying an EVM protected extended attribute or any other
metadata included in the HMAC calculation, the existing 'security.evm'
is verified.  This patch adds calls to integrity_audit_msg() to audit
integrity metadata failures.

Reported-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>